HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The John Richard Collection, LLC
bd_1664c2e420750868 · schema v1 · pii pii-v1
Full breach record for The John Richard Collection, LLC →John Richard Collection, LLC notified New Hampshire residents of a data breach where an unauthorized actor accessed personal information between Jan 18 and Feb 14, 2024. The company detected suspicious activity on Feb 14, 2024, notified law enforcement, and offered credit monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_5e75609fc8d9fa4aMontana State AGfiled 2024-09-11Candidate
- bd_a3a37e746cce03c1Vermont State AGfiled 2024-09-11Verified
- bd_dae3b661e91dcedeMaine State AGfiled 2024-09-11Verified
- bd_e0a7b9a833dbb393Indiana State AGfiled 2024-09-11Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/john-richard-collection-20240911.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 11, 2024
- Raw hash
- e70d2a68598e81a1344260ed03312991d754c489b8d4c0a0cfa3813b8d402d57
Reporting entity
- Name
- The John Richard Collection, LLCnorm: the john richard collection
Victim entity
- Name
- The John Richard Collection, LLCnorm: the john richard collection
Incident
- Discovered
- Feb 14, 2024
- Materiality determined
- —
- Notification sent
- Sep 11, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to other relevant state regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 30 weeks(210 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.